Skip to content
OpenAdvisories

Archive

August 2009

Vulnerabilities first published in this month (UTC), newest first.

← July 2009 2009 / August September 2009 →
  1. 1 
  2. 2 
  3. 318
  4. 411
  5. 516
  6. 625
  7. 715
  8. 8 
  9. 9 
  10. 1027
  11. 1122
  12. 1243
  13. 1325
  14. 1422
  15. 15 
  16. 16 
  17. 1714
  18. 1847
  19. 1921
  20. 2022
  21. 2138
  22. 22 
  23. 23 
  24. 2440
  25. 2529
  26. 2612
  27. 2727
  28. 2825
  29. 29 
  30. 30 
  31. 3128
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2009-3022

    Cross-site request forgery (CSRF) vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the auth…

  • Medium 6.1
    CVE-2009-2967

    Buildbot vulnerable to cross-site scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Buildbot 0.7.6 through 0.7.11p2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, different vulnerabilities than CVE-2009-2959.

    buildbot buildbot Debian PyPI
  • Medium 6.1
    CVE-2009-2959

    Buildbot Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the waterfall web status view (status/web/waterfall.py) in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    buildbot buildbot Debian PyPI
  • Medium 5.5
    CVE-2009-2857

    The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between th…

  • Medium 5.9
    CVE-2009-2055 Exploited

    Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE …

    KEV Mar 25, 2022
  • Medium 6.5
    CVE-2009-2416

    Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow…

    libxml2 Debian
  • Medium —
    CVE-2009-2737

    Roundup Improper Access Control

    The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create privileges for a class to modify arbitrar…

    roundup PyPI
  • Medium —
    CVE-2009-2625 EPSS 30%

    Denial of service in Apache Xerces2

    XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and applic…

    xerces:xercesImpl libxerces2-java Debian Maven